Question about policies and policy order

Forum|Forum|7 years ago
October 4, 2018
4 replies
7349 views

Hello!

I have a question about policies and policy orders. We have CFTV in all of our stores. What i have configured is a policy accepting access during work time but with traffic shape and another policy to accepting access any time and without restrictions because most access are controlled in the outbound policies, not inbound. You can see in the picture attached, policy 100 has the shape (does not show thou), and policy 103 does not have any restrictions. My question is, will the policy 100 that is restricting connection speed be enforced when there is another policy albeit below permiting full speed access? Same case with 101 and 102.

Thanks.

policy.PNG

Dave_Hall

New Member

Can't really tell from the screenshot without the column headers, but assuming traffic hitting policy#100 matches source all, dest "GRP-DVR-TAQI", and time(?) "SCH-COMERICAL-TAQI" then that firewall rule will only be executed without the further rules (below) it being processed.

Firewall rules are execute from top to bottom until a matched rule is found, the rules below the "found" match are not processed. I think the only time a rule falls through is when you have an identity authentication rule - someone correct me on this if it is not correct.